hector 528a368144 ci: refresh the preview-release contract for the current build workflow (#8178) ...

The contract check asserts exact lines in build.yml, and five recent
build-workflow PRs drifted it out of sync, so Security Audit's Workflow
Pin Report job fails for every PR and every push to main since Sep 27
17:34Z (first failure on push run 36337450094). Refresh the assertions
to the current, intentional shapes - contract intent is preserved and
in fact tightened:

- #8160 added PROFILE_ARGS to the cross/native cargo build lines.
- #8171 added 'should_publish == true' as a stricter prefix on the R2
  publication guard and the create-release / upload-release-assets /
  publish-release / update-latest-version conditions.

Verified locally: the full check (including the docker and helm
workflow contract tests) passes against main's files with these
assertions.

2026-09-28 08:54:33 +08:00

..

check_cache_save_if.sh

ci: align cache writer and reader keys (#6398)

2026-08-23 01:44:50 +08:00

check_container_scan_workflow.sh

ci(docker): add release image scan report (#3382)

2026-06-12 13:11:59 +08:00

check_job_timeouts.sh

ci: bound every job's runtime and stop pasting inputs into shell (#5537)

2026-08-01 11:25:26 +08:00

check_performance_ab_workflow.sh

fix(ci): make Warp ABBA evidence bounded and complete (#6417)

2026-08-23 20:20:01 +08:00

check_persist_credentials.sh

ci: preserve failure verdict before early stop (#6552)

2026-08-25 04:33:16 +08:00

check_preview_release_workflow.sh

ci: refresh the preview-release contract for the current build workflow (#8178)

2026-09-28 08:54:33 +08:00

check_tier_artifact_workflow.sh

ci(tier): isolate per-run evidence (#7017)

2026-09-01 23:11:28 +08:00

check_workflow_pins.sh

ci(audit): report unpinned workflow actions (#3379)

2026-06-12 11:33:23 +08:00

generate_release_supply_chain_assets.py

ci(release): emit sbom and provenance assets (#3381)

2026-06-12 12:56:02 +08:00